Policy and Procedures

Subject :

JLM Computer Password Policy

Date :

August 8, 2019

Policy Statement:

All individuals are responsible for safeguarding their system access login and password credentials and must comply with the password parameters and standards identified in the policy. Passwords must meet the complexity and requirements outlined and must not be shared with or made available to anyone in any manner that is not consistent with this policy and procedure. Assigning unique user logins and requiring password protection is one of the primary safeguards employed to restrict access to the Jackson Lumber and Millwork network and data stored within it to only authorized users. Individuals are responsible for keeping passwords secure and confidential. As such the following principles must be adhered to for creating and safeguarding passwords. • Newly authorized users will be required to immediately change their password upon first use. • Passwords must never be shared with another individual for any reason or in any manner not consistent with this policy. • Passwords must never be written down and left in a location easily accessible or visible to others. • Individuals must never leave themselves logged into an application or system where someone else can unknowingly use their account. o To access multiuser workstations (e.g., retail sales counters), IT will provide a limited-use shared account for the workstation. Individual credentials must then be used for accessing applications, such as DotNet and outlook. • Passwords for JLM must be unique and different from passwords used for other personal services (e.g., banking). • JLM passwords must meet the complexity requirements outlined in this policy. • JLM passwords must be changed regularly, as outlined in this policy, at the regularly scheduled time interval or sooner if there is suspicion of a compromise. • In the event a compromise is suspected, the incident must be reported to IT immediately.

Reason for Policy:

Individual Responsibilities: